Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36302e302f32322d3232203d3e20323639343537.roa
File:                     34352e3138372e36302e302f32322d3232203d3e20323639343537.roa (raw, json)
Hash identifier:          H8vg+/aGRep9VIXudtxLNxdC5kTOFSH+n2sFWuHCzEE=
Subject key identifier:   FA:3C:1C:CF:20:ED:78:3B:87:B8:FB:32:B6:96:A4:9F:A8:3C:65:E8
Certificate issuer:       /CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
Certificate serial:       1206EECADE5152063BE87E85BA1DE24B566F355F
Authority key identifier: CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36302e302f32322d3232203d3e20323639343537.roa
Signing time:             Fri 16 May 2025 13:58:26 +0000
ROA not before:           Fri 16 May 2025 13:53:26 +0000
ROA not after:            Fri 15 May 2026 13:58:26 +0000
asID:                     269457
IP address blocks:        45.187.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl
                          rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 00:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:06:ee:ca:de:51:52:06:3b:e8:7e:85:ba:1d:e2:4b:56:6f:35:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
        Validity
            Not Before: May 16 13:53:26 2025 GMT
            Not After : May 15 13:58:26 2026 GMT
        Subject: CN=FA3C1CCF20ED783B87B8FB32B696A49FA83C65E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ee:92:96:ba:65:b7:fb:63:83:af:44:79:5b:
                    29:e9:41:f6:97:83:64:c6:27:14:07:63:30:61:d8:
                    8a:f3:f6:fe:22:5d:c8:98:85:aa:48:9b:79:05:05:
                    31:fd:1b:15:c4:4c:73:3b:09:a6:1d:59:08:c2:4e:
                    9e:21:d0:1d:2e:fa:05:0b:60:d2:f9:82:10:7e:bd:
                    5c:88:d4:6c:6e:bd:24:bd:ad:cf:2d:ba:58:1a:60:
                    34:c6:f7:3e:2f:2c:01:c6:8d:20:c5:8e:75:ea:e1:
                    b7:90:9d:dd:86:e9:f0:63:c5:24:90:fb:23:e7:54:
                    96:d4:75:b8:46:5f:26:15:74:91:a5:95:65:c7:1f:
                    78:80:3e:a8:d6:79:46:36:cd:e1:ee:44:9a:2e:64:
                    fa:ec:3f:22:15:22:cc:80:ae:2d:3b:62:0c:38:2e:
                    3f:4b:64:1e:ef:8e:df:f2:19:8b:8b:61:42:f4:c3:
                    48:a5:ce:0d:5e:5e:b2:d6:36:36:01:03:b6:e8:8e:
                    79:82:e1:6e:b8:4d:9a:55:8b:40:0f:ab:08:02:27:
                    98:87:68:29:05:33:07:dd:e1:ae:50:ae:5d:d2:17:
                    25:ae:77:20:be:64:6b:92:a1:f9:54:d9:e0:f6:6b:
                    f6:ab:35:de:0a:c0:b0:6f:3e:dd:95:e5:99:66:a4:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3C:1C:CF:20:ED:78:3B:87:B8:FB:32:B6:96:A4:9F:A8:3C:65:E8
            X509v3 Authority Key Identifier:
                keyid:CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/34352e3138372e36302e302f32322d3232203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:90:cb:28:bc:c3:e6:3c:dd:33:7e:10:06:9e:1b:80:2c:
         ef:9a:d9:fa:e9:0e:e2:28:a4:5b:8a:81:75:72:8d:a3:4d:4c:
         70:ad:3d:81:74:97:64:9c:59:69:6a:8d:fb:5a:8a:84:c8:7d:
         59:7d:73:24:1e:f7:6b:b3:7b:12:82:1b:42:c1:a8:49:e0:40:
         9b:df:ff:30:c6:e1:f0:7a:05:81:f1:2d:49:a0:f3:e3:53:f4:
         1b:3e:87:ff:9a:a5:5a:fb:2b:8f:d1:c0:88:7a:02:d3:43:0f:
         4f:20:e8:b7:21:09:49:08:9c:cf:55:72:3e:3f:3d:92:13:65:
         09:65:3d:a5:5f:e8:e8:94:e8:99:be:60:5f:28:38:05:46:b6:
         b2:61:3d:73:72:b6:b0:f7:fb:4e:1d:56:a8:72:73:16:ae:11:
         51:4e:28:b6:75:10:3e:36:03:90:a6:20:07:6f:21:f3:cf:f1:
         73:a8:62:e5:f6:c7:cc:3f:39:85:90:ad:f7:d0:3e:24:05:01:
         4e:a7:5c:5c:01:4b:94:fa:3f:18:b3:72:cf:a8:c2:cb:9d:f2:
         59:1f:36:61:13:81:42:77:a1:9e:e4:dc:8c:d1:fa:7f:4b:7f:
         00:d5:0e:d1:6c:a9:03:dd:c6:69:a0:a7:9a:43:0c:72:2e:c4:
         95:8a:cd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:36:06 2025 by rpki-client